This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer File: qPP_zPK9bxc-V43OhiXgHFOX9zU.cer (raw, json) Hash identifier: 2Wy5saxN4JgPoTajUP5v1JviOEmxZ0Wv+B7Dn466aZk= Subject key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B87 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:50:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329181 IP: 102.218.220.0/22 IP: 2c0f:6500::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15239 (0x3b87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:50:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:d6:87:0b:fc:6b:bd:ed:f7:ff:54:1f:36: b5:19:23:2d:9d:74:2b:c7:93:bc:7d:6d:3c:64:13: 52:1a:8f:6c:b1:05:6e:e0:3e:e8:5a:c4:40:dd:23: 7f:48:f6:ea:07:b2:16:4f:71:ba:dc:db:bd:1d:2b: 03:ea:8d:df:5b:bb:54:37:e7:27:1f:46:a4:6e:38: 59:19:0f:2d:ba:2e:eb:64:d5:8a:76:41:e0:f1:61: de:a7:50:92:43:08:c9:d4:a8:18:2c:25:60:d1:9d: a4:8b:7f:d9:08:18:9d:26:1a:c7:30:a1:f6:da:ea: 1a:c8:d4:e9:5e:4a:28:92:a5:61:fd:85:64:b7:d9: 75:14:d5:24:cb:cd:34:4e:1d:e1:40:89:4f:c8:a8: 09:7f:57:38:18:3f:08:c2:bc:5f:c5:36:4f:26:66: e5:59:ea:43:42:78:69:34:34:0d:9a:99:9a:4b:af: 4d:f3:6c:08:da:26:60:15:0b:8c:f6:e3:e1:91:ed: 51:06:69:74:43:98:a7:80:ef:75:2b:df:61:43:da: 07:d3:db:b0:9c:1c:a5:0f:82:39:99:72:f2:a5:e3: d3:da:e1:f9:17:1c:e6:e7:6e:06:6c:32:72:0d:72: 50:48:9c:00:21:b3:51:98:e2:40:7f:5b:25:9b:ec: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329181 sbgp-ipAddrBlock: critical IPv4: 102.218.220.0/22 IPv6: 2c0f:6500::/32 Signature Algorithm: sha256WithRSAEncryption 43:95:22:7f:6e:7e:bd:72:94:2d:7a:e0:1c:3a:3d:af:97:ea: 25:b1:dd:63:1c:88:74:51:cb:fe:23:3f:6f:6c:e5:b8:06:eb: fa:4d:a1:21:37:f2:14:f9:c4:b0:91:bc:fe:dc:2f:da:b1:f9: 23:9a:d7:54:41:bc:6e:73:ef:ef:c6:72:34:a3:c2:b7:97:bc: 02:28:46:3c:39:a7:73:47:71:67:48:e5:84:4f:81:6a:2d:e2: 2d:5f:87:06:e4:50:53:d5:cf:28:6b:2e:6f:98:45:1b:97:f3: 59:55:28:84:93:ad:62:f1:64:43:19:41:8f:02:7b:b1:6d:03: 2c:84:a5:cb:7e:0e:b7:e4:73:00:70:0a:a3:91:fb:77:a8:ca: d1:b1:26:fa:5b:a5:84:b0:77:07:34:f4:50:1c:8f:ca:ad:3f: 16:2f:ea:9c:95:22:ba:6c:22:54:9e:3e:11:8e:a3:53:6e:28: bd:91:03:72:54:25:63:d9:17:89:94:dc:27:83:61:d1:a7:56: 93:28:bb:55:73:8e:c5:f1:f6:70:23:4c:d4:1b:e0:20:4d:96: 41:41:15:34:cc:ad:7d:29:f5:81:71:11:16:e1:db:22:c4:26: 9a:71:02:a3:01:2a:7b:02:1e:e2:3a:2b:a0:ca:7d:7f:a8:21: 3b:9a:bf:69 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICO4cwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjUwMjBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjg0MDI3QUYxMTAvBgNVBAUTKEE4RjNGRkNDRjJCRDZGMTczRTU3OERD RTg2MjVFMDFDNTM5N0Y3MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb7taHC/xrve33/1QfNrUZIy2ddCvHk7x9bTxkE1Iaj2yxBW7gPuhaxEDdI39I 9uoHshZPcbrc270dKwPqjd9bu1Q35ycfRqRuOFkZDy26Lutk1Yp2QeDxYd6nUJJD CMnUqBgsJWDRnaSLf9kIGJ0mGscwofba6hrI1OleSiiSpWH9hWS32XUU1STLzTRO HeFAiU/IqAl/VzgYPwjCvF/FNk8mZuVZ6kNCeGk0NA2amZpLr03zbAjaJmAVC4z2 4+GR7VEGaXRDmKeA73Ur32FD2gfT27CcHKUPgjmZcvKl49Pa4fkXHObnbgZsMnIN clBInAAhs1GY4kB/WyWb7NbnAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUqPP/zPK9 bxc+V43OhiXgHFOX9zUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4NDAyNy80M0RDMEZEQzIwNzcx MUVDQjIzRkUyMjZEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODQwMjcvNDNEQzBGREMyMDc3MTFFQ0IyM0ZFMjI2RDhBMDE0Q0UvcVBQX3pQ SzlieGMtVjQzT2hpWGdIRk9YOXpVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBd0wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2twwDQQCAAIwBwMF ACwPZQAwDQYJKoZIhvcNAQELBQADggEBAEOVIn9ufr1ylC164Bw6Pa+X6iWx3WMc iHRRy/4jP29s5bgG6/pNoSE38hT5xLCRvP7cL9qx+SOa11RBvG5z7+/GcjSjwreX vAIoRjw5p3NHcWdI5YRPgWot4i1fhwbkUFPVzyhrLm+YRRuX81lVKISTrWLxZEMZ QY8Ce7FtAyyEpct+DrfkcwBwCqOR+3eoytGxJvpbpYSwdwc09FAcj8qtPxYv6pyV IrpsIlSePhGOo1NuKL2RA3JUJWPZF4mU3CeDYdGnVpMou1VzjsXx9nAjTNQb4CBN lkFBFTTMrX0p9YFxERbh2yLEJppxAqMBKnsCHuI6K6DKfX+oITuav2k= -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:04 2026 by rpki-client